The Stax is genuinely impressive hardware. A 3.7-inch curved E Ink touchscreen, wireless charging, NFC, credit-card form factor. It's the best-looking hardware wallet ever made. It also has closed-source firmware, a controversial seed backup service, and a track record of security incidents at the company level. Both things are true.
The Stax makes sense for one specific type of holder: someone who manages a multi-asset portfolio (Bitcoin plus Ethereum, Solana, various tokens) in Ledger Live, wants the best possible user experience for that workflow, and isn't exclusively focused on open-source security principles.
If that's you, the Stax is objectively the best Ledger device ever made. The touchscreen makes navigating addresses and confirming transactions faster and less error-prone. Wireless charging is genuinely convenient. The form factor fits in a wallet or card slot. Nothing else in the hardware wallet market looks or feels like this.
If you're Bitcoin-only and care primarily about open-source auditability and air-gap security, the Stax isn't the right tool. A Foundation Passport at $199 or Coldcard Mk4 at $148 gives you open firmware and a proper air-gap at lower cost. The Stax's premium goes to design and UX, not security fundamentals.
The 3.7-inch curved E Ink display is a genuine step forward for hardware wallet usability. Every wallet before this generation showed you truncated addresses on tiny screens that required awkward scrolling or button-pressing to verify. The Stax shows you the full receiving address at once, large enough to read clearly and compare against what's on your computer screen.
E Ink is smart for a device that should spend most of its time sitting idle. The display consumes almost no power when static, which is how you get weeks of battery life from a device that charges wirelessly. The screen stays on showing a custom image (or nothing) without draining the battery.
Touch input on E Ink is noticeably slower to respond than an LCD or OLED. It works. It's just not snappy. For a device you use occasionally to confirm transactions, that's fine. If you were hoping for phone-like responsiveness, lower your expectations slightly.
Your hardware wallet's entire security premise is that your private keys never leave the device in a usable form. You're trusting the firmware to enforce that. With open-source firmware, independent security researchers can verify the code does what it claims. With closed-source firmware, you're trusting the manufacturer.
Ledger's position: the Secure Element chip requires NDAs with the manufacturer (STMicroelectronics) that prevent them from open-sourcing the firmware. They say they use third-party auditors. That may be true. You can't verify it yourself, which is the whole point of open source.
Then came May 2023. Ledger launched Ledger Recover, an optional service that lets you back up your seed phrase by splitting it and sending encrypted shards to three custodians via a firmware update. The community reacted badly, and understandably. If a firmware update can extract key material, even encrypted and user-consented, that's a fundamentally different security model than what Ledger had previously communicated.
Ledger's response was that user consent is always required and the hardware never extracts keys without it. That's probably accurate. But "trust us, it requires consent" is a weaker position than "here's the firmware source code, verify it yourself." The Coldcard, BitBox02, and Passport all let you do the latter.
Two incidents worth understanding before buying any Ledger product:
Attackers accessed Ledger's e-commerce database via a third-party API. About 1.1 million email addresses were exposed. For 272,000 customers, full names, phone numbers, and home addresses leaked. No seed phrases or private keys were compromised. But the physical address leak led to targeted phishing campaigns and, in documented cases, physical threats. Some Bitcoiners now use a PO box for hardware wallet purchases specifically because of this.
Attackers phished a former Ledger employee's npm account and published malicious versions of the Ledger Connect Kit, a JavaScript library used by DeFi dApps. The malicious code ran for roughly five hours and drained an estimated $600,000-700,000 from DeFi users. The hardware wallets themselves weren't compromised. If you use your Ledger only for Bitcoin transactions (not DeFi), this attack wouldn't have affected you.
Neither incident compromised hardware wallet private keys. The hardware security model held. The issues were at the company infrastructure level. Worth knowing, not a dealbreaker for informed use.
| Wallet | Price | Open Firmware | Air-gapped | Screen |
|---|---|---|---|---|
| Ledger Stax | $279-399 | ❌ No | ❌ No | 3.7" curved E Ink touch |
| Ledger Flex | $249 | ❌ No | ❌ No | 2.84" flat E Ink touch |
| Foundation Passport | $199 | ✅ Hardware + firmware | ✅ QR only | 1.8" color LCD |
| Coldcard Mk4 | $148 | ✅ Firmware | ✅ microSD + QR | Small OLED |
| BitBox02 | $149 | ✅ Hardware + firmware | ❌ USB-C | OLED display |
Yes, and for Bitcoin it's worth doing. Ledger Live is convenient but it connects to Ledger's servers by default, which means Ledger can see your Bitcoin addresses and balance. That's a privacy tradeoff many Bitcoiners aren't comfortable with.
Sparrow Wallet works with the Stax via USB-C and supports full PSBT transaction signing. Connect Sparrow to your own Bitcoin node and no third party sees your wallet data. Electrum works the same way. BlueWallet connects over Bluetooth for mobile use.
The run a Bitcoin node guide covers setting up your own node for Sparrow. It's not required, but if you're spending $300+ on a hardware wallet, taking the next step for privacy makes sense.
If you're managing a multi-chain portfolio and want the best Ledger experience, yes. The Stax is a legitimately impressive piece of hardware and the best product Ledger has ever made. Nothing else in its category has a screen this good.
If you're Bitcoin-first and security is the priority, no. Closed-source firmware means you can't verify what's running on the device. The Recover controversy showed the firmware can export key material. The data breach showed Ledger's customer infrastructure has been compromised before. None of that makes the hardware wallet itself insecure, but it's a different trust model than open-source alternatives.
The $199 Foundation Passport gives you open hardware, open firmware, QR air-gap, and the best companion app of any wallet. If security principles matter more than screen size, that's the better buy. Our full cold storage guide helps you figure out which wallet fits your setup.
Starting at $279 from Ledger's official store. Only buy directly from Ledger to avoid tampered devices.
Affiliate Disclosure: Bitcoin.diy may earn a commission if you buy through our links. This doesn't affect our ratings.
The Stax is a complete design rethink. The Nano X is a USB stick with a small OLED screen. The Stax is a credit-card-sized device with a 3.7-inch E Ink curved touchscreen, Qi wireless charging, NFC, and a magnetic back for stacking. The Secure Element chip is the same CC EAL6+ standard. The firmware is still closed source. The experience is dramatically better. The price is $279-399 versus $149 for the Nano X.
No. This is the biggest objection from the Bitcoin security community. The Secure Element chip firmware is closed source because of NDA agreements with the chip manufacturer (STMicroelectronics). Ledger publishes their OS and some tooling, but the critical firmware running on the secure chip can't be independently audited. Coldcard, BitBox02, and Foundation Passport all publish open firmware. If firmware auditability matters to you — and for serious Bitcoin self-custody, it should — the Stax isn't the right choice.
Ledger Recover is an optional paid subscription service ($9.99/month) that encrypts your seed phrase, splits it into three shards, and stores them with three different custodians: Ledger, Coincover, and Escrowtech. You can use it to restore your wallet without your physical seed phrase. The controversy: a May 2023 firmware update that enabled this feature proved the Secure Element could export key material via software update, which Ledger had previously implied was impossible. Most serious Bitcoiners don't use it. If you need a backup solution, a metal seed plate in a safe is free and doesn't involve trusting three companies.
Yes, for Bitcoin specifically. The Stax works with Sparrow Wallet and Electrum via USB-C, and with BlueWallet via Bluetooth. These are better choices for privacy-conscious Bitcoin holders since Ledger Live connects to Ledger's servers by default. Using Sparrow or Electrum with your own node keeps your transaction data off Ledger's infrastructure entirely.
In December 2023, attackers compromised an npm account belonging to a former Ledger employee and injected wallet-draining code into the Ledger Connect Kit, a JavaScript library used by dApps. The malicious code was live for roughly five hours and drained an estimated $600,000-700,000. The hardware wallets themselves weren't compromised. It affected DeFi users interacting with dApps, not Bitcoin holders doing basic transactions. Still, it's a meaningful data point about Ledger's software supply chain security.
For Bitcoin-only use, it's hard to justify over a $199 Foundation Passport or $148 Coldcard Mk4. Both have open firmware, stronger air-gap options, and are built specifically for Bitcoin. The Stax's premium is mostly paid for the touchscreen, wireless charging, and the form factor. Those are nice things. They're not security advantages. If you're managing a multi-chain portfolio in Ledger Live and want the best Ledger experience, the Stax is the top of that range. If you're a Bitcoin-first holder who cares about security fundamentals, there are better choices at lower prices.
Yes. The Stax appears in standard hardware wallet comparisons and supports all major Bitcoin features: PSBT via Sparrow, multisig coordination, passphrase support, and Segwit/Taproot addresses. Feature parity with other premium wallets is fine. The differentiation is on open source and air-gap security, where the Stax loses to Bitcoin-focused alternatives.
In July 2020, attackers accessed Ledger's e-commerce database via a third-party API. Around 1.1 million email addresses were exposed, and for approximately 272,000 customers, full names, phone numbers, and home addresses were leaked. No seed phrases or private keys were compromised. But the leaked physical addresses led to targeted phishing campaigns and, in some cases, physical threats against Ledger customers. It's a reminder that buying a hardware wallet creates a paper trail. Some people use a PO box or reshipping service for hardware wallet purchases specifically because of this.
Ledger claims weeks of standby time on a single charge, which is realistic given E Ink consumes almost no power when static. Active use (signing transactions, navigating menus) drains it faster. Wireless Qi charging means you can drop it on any wireless charging pad. The Ledger Flex doesn't have wireless charging — USB-C only. For day-to-day use, battery life is not a concern on either device.
If you're deciding between the two Ledger touchscreen models: the Flex at $249 gives you 90% of the Stax experience at $50-150 less. The Stax has a bigger screen, wireless charging, NFC, a curved glass design, and magnetic stacking. The Flex has a smaller flat E Ink screen and charges via USB-C. Both run the same firmware, support the same assets, and have the same security model. The Stax is the better product. Whether the premium over the Flex is worth it depends purely on how much you value the larger screen and wireless charging.